$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: 5NtdJKapYjxA21uhgPYxw0lMCs6rNUdrNIBUs5X8jkA= Subject key identifier: C1:68:8A:BD:5A:FD:31:14:9E:C2:CB:33:91:A6:92:FA:7D:DD:47:99 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 01A0DB03FCFC349DB8FAD27BBA9A7CE9B845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 1A9A Signing time: Sat 26 Sep 2026 00:01:06 +0000 Manifest this update: Sat 26 Sep 2026 00:01:06 +0000 Manifest next update: Sun 27 Sep 2026 00:01:06 +0000 Files and hashes: 1: E8mOohDcmePz8wTu6FwWLzSrlS8.roa (hash: GTMclphGCva6x2txMNdZeOKZzdKFQq0vbNyBSMSOHFk=) 2: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=) 3: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=) 4: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=) 5: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=) 6: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=) 7: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=) 8: SICqctuob7LKpjHMHlTL9BKMXF0.roa (hash: YxXg8B/+U9HgCgcJlh6pzSviIU9e9c6Wth+N8tKmuIM=) 9: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=) 10: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: 6O0hWeeTsAcVZdMXbCV5SE4NiZb920heGs2Cl2HABLg=) 11: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=) 12: zO8B6pGMJX9XU98xnLdwntnL3vI.roa (hash: 3CDxux5G2RSqAQp+WPxKqKOTx95LFqdOHC+tvDKHc4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 00:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:03:fc:fc:34:9d:b8:fa:d2:7b:ba:9a:7c:e9:b8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Sep 26 00:01:06 2026 GMT Not After : Sep 27 00:01:06 2026 GMT Subject: CN=c1688abd5afd31149ec2cb3391a692fa7ddd4799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:a2:be:7a:59:eb:01:ec:10:75:1e:d7:f6: 6a:3f:f5:ad:eb:fb:ac:7f:a7:4f:d9:04:82:a0:6c: 50:40:dd:c1:22:97:e9:d6:dd:c0:64:09:71:df:65: 0f:15:cd:a7:1b:8b:c0:1b:1f:9e:13:f4:6a:cc:27: 7c:ea:a1:36:26:a4:25:d7:0d:ca:4f:65:14:be:21: 9c:cf:09:42:14:5a:45:2f:b9:2e:a2:57:75:94:4c: fd:5e:da:13:d9:8e:a8:6c:35:8f:a7:48:2c:95:a8: 4b:74:3d:ce:bd:b7:db:22:53:16:f0:2d:60:fa:92: ad:c9:56:37:8c:7e:63:d5:0b:1b:2a:65:11:64:df: 6d:19:37:3c:78:17:e4:72:43:ba:a5:78:29:2a:0a: 98:08:d2:fe:46:cb:75:ea:fb:eb:be:91:29:4b:7d: 5f:48:4f:aa:69:17:87:f9:08:88:cf:ef:62:9f:fc: 7f:34:38:03:9c:c5:40:07:c0:fa:34:cd:5c:0e:9f: 77:e7:ab:a9:7a:c5:28:13:dc:40:cf:aa:91:8f:3b: 31:ab:a9:31:96:5c:56:e0:61:76:f0:c0:a0:ac:6f: 4a:74:8c:74:1b:cc:db:6e:aa:9b:cb:3d:55:77:03: 81:ea:47:00:e3:f7:19:b1:2b:80:b5:7d:11:31:eb: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:8A:BD:5A:FD:31:14:9E:C2:CB:33:91:A6:92:FA:7D:DD:47:99 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:82:99:32:72:19:75:ec:e3:37:6e:24:d2:a3:12:9f:eb:c2: 93:18:4a:18:34:a8:3b:01:b1:37:31:b2:d4:c8:08:90:b5:4b: 0b:f9:aa:aa:7e:5c:60:b3:87:42:42:3a:d3:5b:11:63:b7:fa: 41:c0:b6:bd:3f:41:78:f9:7e:6f:e6:f5:fe:59:4f:c8:06:d3: 2e:d4:0b:ff:36:7c:59:8c:f2:fc:cf:7f:9b:13:1d:ee:38:83: 2d:6f:29:ff:f3:a6:3f:94:2f:93:ed:21:3e:8b:89:10:e6:fe: bb:68:ab:f5:44:d2:8b:cc:e3:6f:fb:28:d3:e3:c3:62:7b:0d: 83:38:77:8a:63:77:90:83:c7:ad:0d:3c:e4:87:62:cb:8c:70: 7e:21:33:86:61:af:4c:0f:3c:cd:06:b2:5b:7e:46:ee:b7:1e: f1:b2:87:f7:86:22:8d:44:d6:22:4b:b9:ab:d5:59:54:a0:03: 3d:38:7e:ed:d6:e9:a1:88:6f:c1:f6:2d:12:38:b6:36:39:1b: 55:d8:98:4f:14:f5:79:29:88:6b:03:52:2a:25:73:83:8f:b5: cb:51:50:cc:02:65:46:7f:90:e8:26:6d:db:0b:f1:31:d8:1a: a3:36:3c:b6:43:c6:df:73:5b:57:9d:06:ee:53:8a:cd:01:b4: 5e:df:9d:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbA/z8NJ24+tJ7upp86bhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwOTI2MDAwMTA2WhcNMjYwOTI3MDAwMTA2WjAzMTEwLwYDVQQD EyhjMTY4OGFiZDVhZmQzMTE0OWVjMmNiMzM5MWE2OTJmYTdkZGQ0Nzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIaivnpZ6wHsEHUe1/ZqP/Wt6/us f6dP2QSCoGxQQN3BIpfp1t3AZAlx32UPFc2nG4vAGx+eE/RqzCd86qE2JqQl1w3K T2UUviGczwlCFFpFL7kuold1lEz9XtoT2Y6obDWPp0gslahLdD3OvbfbIlMW8C1g +pKtyVY3jH5j1QsbKmURZN9tGTc8eBfkckO6pXgpKgqYCNL+Rst16vvrvpEpS31f SE+qaReH+QiIz+9in/x/NDgDnMVAB8D6NM1cDp9356upesUoE9xAz6qRjzsxq6kx llxW4GF28MCgrG9KdIx0G8zbbqqbyz1VdwOB6kcA4/cZsSuAtX0RMevPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFoir1a/TEUnsLLM5Gmkvp93UeZMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4KZMnIZ dezjN24k0qMSn+vCkxhKGDSoOwGxNzGy1MgIkLVLC/mqqn5cYLOHQkI601sRY7f6 QcC2vT9BePl+b+b1/llPyAbTLtQL/zZ8WYzy/M9/mxMd7jiDLW8p//OmP5Qvk+0h PouJEOb+u2ir9UTSi8zjb/so0+PDYnsNgzh3imN3kIPHrQ085Idiy4xwfiEzhmGv TA88zQayW35G7rce8bKH94YijUTWIku5q9VZVKADPTh+7dbpoYhvwfYtEji2Njkb VdiYTxT1eSmIawNSKiVzg4+1y1FQzAJlRn+Q6CZt2wvxMdgaozY8tkPG33NbV50G 7lOKzQG0Xt+dDQ== -----END CERTIFICATE-----Generated at Sat Sep 26 05:36:23 2026 by rpki-client